PT-2013-3830

CVE-2013-2547

Publicado

2013-03-14

Atualizado

2021-07-15

Descrição por

CVSS 2.0

2.1

Baixa

MétricasAV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.8.3

Description The issue concerns the crypto report one function in the Linux kernel, which fails to initialize certain structure members. This allows local users with the CAP NET ADMIN capability to obtain sensitive information from kernel heap memory.

Recommendations For versions prior to 3.8.3, update to version 3.8.3 or later to resolve the issue.

Explorabilidade

Correção

Pesquisadores

Mathias Krause

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-310

Identificadores relacionados

CVE-2013-2547

RHSA-2013:0829